Best Free Anonymous Surfing Service

 
In a Hurry?
  Go straight to the Quick Selection Guide
Introduction

Anonymous Browsing ApplicationsThere are many reasons people have for wanting to surf anonymously, ranging from simple paranoia in terms of protecting personal data, to hiding browsing activities from other users of a computer including parents, spouses, or even other organizations. Whatever your reasons for wanting to use anonymous browsing services, or criticizing others for wanting to use them, I will not debate the political, legal, moral, ethical and other reasons, but simply review the available technology. Be aware that most corporate networks will block the use of anonymous surfing activities at the corporate firewall. Corporate networks and internet links are after all the property of your employer and should never be misused in violation of corporate acceptable use policies, so don’t expect any help here in finding ways to circumvent firewall blocking.

The most obvious anonymous browsing application for most people is in internet cafes, on public terminals, using wireless or even wired access points away from home, or in fact, on any PC including your own, where you don't want to leave traces of your private surfing activities. Some other browsing activity cleaners exist that clear the cache, cookies, history and other traces, some are even available as a standard in most browsers, but anonymous browsing goes a step further. What attracts me is not so much the privacy aspect, but rather the security potential, because all of the anonymizing browser proxy based services create a secure encrypted connection between the PC you are using and the first anonymizing proxy server. This allows you to safely transmit information with little risk of local interception, making it ideal for surfing on open Wi-Fi networks, or in hotels while travelling.

Previously, secure surfing on such networks required the use of private VPN networks, generally an option only available to corporate employees, those with the available money to pay for it and the technically savvy. Now, using any of the Tor or JAP based browsers, any surfer can reap the same sort of security benefits for their browsing. Whatever the reasons anyone may have for using anonymizing browsing, commercial services that offer anonymity are doing well, and a number of both free and subscription based browsing applications and services have become available.

Two dominant services exist which provide the foundation for free, secure anonymous browsing. The JAP network was good enough that the German Police insisted in 2004, that a backdoor be put into the product to allow interception of child pornographers. This was done, but subsequently removed as a result of court action by the JAP development team. The alternative is Tor (The Onion Ring), which is a system that not only allows anonymous browsing but also anonymous P2P, email, IM, and IRC chat. Given the US Navy origin of Tor, the suspicion inevitably arises that this system may have a permanent backdoor, however, the source code is now publicly available so that suspicion can perhaps be set aside. More worrying was a raid by German police in September 2006 involving the seizure of some Tor servers in that country. Again, pedophiles were the supposed target, but who really knows.

Discussion

OperaTor OperaTor is my clear first choice, a portable version of Opera with an included and well integrated Tor engine that uses the free Tor network. OperaTor is small and relatively fast, using just 6Mb of memory for it’s Tor engine, 2Mb for the Polipo caching proxy, 3Mb for the OperaTor loader and 18Mb for Opera. In my experience, OperaTor is by far the fastest browser, even with multiple proxies on the Tor network so that the browsing trail is frequently changing for greater security. Some people don't like the fact that OperaTor is not released with source code available (at least not that we have yet located) which may influence the choice in whether to use it or not. I believe that unless a user is proficient in programming, or at least reading the development language of any particular application, this becomes rather irrelevant, unless some amount of comfort or security might be perceived in knowing that source is available and others might be checking it even if the user of the application can not read it personally. Even closed source projects that become popular generally receive enough user and peer scrutiny that most problems would be quickly exposed.

JonDo anonymous network

JonDo (previously known as JAP) is my second choice and is in some ways a more flexible option, in that it is simply a Java application that performs the role of a local (PC based) proxy server that redirects browser requests via the JonDo (formerly JAP) network. This allows the user to configure their choice of any browser rather than requiring a change to Opera. Unfortunately, being Java based means that the application becomes somewhat bloated, requiring 54Mb of memory just for the Java JonDo application, as well as another few Mb for the JAP engine, and then whatever additional is required for the web browser of choice. JonDo does have quite a nice GUI display which shows the strength of the anonymity based on the number of anonymizing proxy servers, and takes care of managing the random proxy changes for greater anonymity. A commercial service known as JonDonym has been introduced which uses dedicated servers to provide higher speeds, higher levels of availability and more security along with support for chat, ftp and ssh in addition to web browsing. Another offering from the commercial JonDonym group is JonDoFox, a customized version of Firefox with JonDo code embedded along with other anonymizing optimizations. Unfortunately, JonDo not being a network like Tor is prone to some limitations in terms of the numbers of free servers, and some subsequent downtimes may be more likely with the smaller server base.

Vidalia using Tor anonymizing network

Vidalia is my third choice, a close match to JonDo in that it is quite a bit lighter in memory use and generally feels faster, but may not have the same level of anonymizing as JonDo. Vidalia is another integrated package using a combination of Privoxy and a Tor engine to connect to the Tor network, but it offers many new features. As with JonDo, Vidalia behaves as a local proxy for use by any browser, but it also provides configurations allowing it to run either as a simple standalone process or as a Windows service (for security and performance reasons, among others). Vidalia allows the user to participate in the anonymizing process by becoming a Tor Relay to help censored users in a similar way to becoming a BitTorrent relay, and a live realtime facility is available showing a map of the earth with lines representing connections to the Tor server participants. Vidalia uses 24 - 32Mb of memory, with an additional 4Mb used for Privoxy and another 16.5Mb for the Tor engine. One initially confusing aspect of Vidalia is that it provides a configuration access through port 9051, but it is not immediately obvious that Privoxy is listening on port 8118. Browsers using the Vidalia bundle must be configured to use the Privoxy port 8118 as the proxy server, not port 9051. Like JonDo, the Vidalia/Privoxy combination constantly changes proxy servers to mask the trail to provide greater anonymity.

Whatever your preference, both JAP and Tor networks offer a level of secrecy that is better than many commercial systems, though they are not watertight. Expect your surfing to slow down, in some case substantially, because you'll be relayed through a chain of servers, all heavily impacted by BitTorrent users seeking to hide from the RIAA. Note: the latest V5 release of JAP now allows Tor users to use JAP as a software access point to the Tor network.

XeroBank Firefox based browser

The XeroBank Browser (previously known as TorPark) provides a new customized version of the Firefox browser configured to work with the free Tor anonymizing service, or with a subscription service for higher speeds using dedicated servers, and other features. Firefox users may feel more comfortable with XeroBank, as it is based on Firefox, but also need not make any changes at all if they make use of either the JonDo or Vidalia bundles to access the Tor engine other than to set the proxy server, and of course, manual cleanup of the cache, cookies and browsing history after use. XeroBank claims to have many advanced features, but for the average user most of these may not be apparent, unless the subscription service is used. While the XeroBank browser is free to use on the Tor network, the XeroBank web site promotes the use of their subscription-based account. During installation, the XeroBank Browser offers the choice of using either the commercial XeroBank Client or the free Tor service. Caution! Some antivirus scanners report trojan infected code in the XeroBank download. Use http://jotti.org to verify all downloads, and use XeroBank and all other applications with caution, but be aware that some of the virus scanners used by jotti.org may also be overly zealous in their reporting of infections. Some claimed virus or trojan infections in various applications are no more than firewall detection, or software product key reporting capabilities mis-diagnosed by the scanner as a potential threat.

 The downside of XeroBank as contrasted with using JonDo or Vidalia, is that you would need to use XeroBank for anonymous browsing and your regular browser for other surfing. Using JonDo or Vidalia, you can use the browser of your choice, and just reconfigure to use the proxy when you want to anonymous surfing. This won't automatically clean out all other personal data (cache, history, cookies etc.) when the application is shut down, which OperaTor and XeroBank do.

For all anonymizing services, check that you are running in anonymous mode by first browsing to one of many servers which reports your IP address, for example http://www.whatismyip.com/ and take note of your IP address. Reconfigure your browser to make use of the anonymizing service, and reload / refresh the browser and verify that the reported IP address has changed. Some IP reporting servers will also tell you which country, and even which city you now appear to be connecting from.

Most of the services reviewed are able to run directly from a USB flash drive if the executables are simply copied as is from their installation directories. This works really well, just plug your flash drive into any PC with a USB port, launch both the anonymizing proxy software and a browser, set the browser to redirect via the anonymizer and you will be in business. In the case of both OperaTor and XeroBank, all you need to is launch the browser from your flash drive and you will be ready to start browsing.

XeroBank XBMachine Live CD running under QEMU virtual machineWhile some 'LiveCD' applications such as XeroBank Machine and Incognito Live CD have been created and may provide similar functions, they mostly seem to be currently released in various stages of alpha or beta test versions and have bugs or limitations. For example, the XeroBank Machine provides two options. You can either run the xBMachine.exe from a Windows prompt which starts a QEMU virtual machine and then runs a GenToo Linux kernel, or by booting from a "Live CD". This Live CD boots the same customized GenToo Linux environment from CD without any Windows involvement. In simple terms, both xBMachine options simply provide a different "hardened" OS platform to run the Firefox based XeroBank Browser. Is LiveCD really useful? To some people, yes, not to me. It does mean that like SandBoxie, your guest operating system is protected from malicious web sites via your browsing, and when you stop the QEMU virtual machine or reboot the PC from hard disk rather than CD all traces are removed. I am a Unix / Linux geek so I am totally at home with them, but for the average person, I suspect the LiveCD and QEMU based options will provide a confusing level of complexity that will just interfere with their browsing and desire to be safe. Not much can beat truly safe browsing habits, whatever browser or add-on tools you use. xBMachine is a 380Mb zip file download, which unpacked yields a 391Mb ISO image to create a CD as well as another 10Mb or so of the QEMU environment. The QEMU hosted browser uses 292+Mb of XeroBank XBMachine Live CD running under QEMU virtual machinememory, requires the ISO image present, and took more than 5 minutes to load and be ready for use on a 1.8Ghz dual core Intel PC with 1Gb or memory. It provides a Linux X-Windows GUI with a profile configuration, a network configuration, xBBrowser, e-mail, Pidgin instant messenger, terminal and an option to configure for the paid subscription network. I don't know about you, but I am not willing to wait 5 or more minutes and have close to 300Mb of disk space tied up in a browser that took another minute or two to load, and then in my case never managed to connect out anyway. For those who feel that having source available makes a better product, go ahead and try to download the XeroBank source. All of the links gave me a 7Mb source zip file which was corrupted and would not open. Would this give you "open source available" feelings of security? I don't think so.

I'm a freeware and open source fan, I can read and write programs, but not when the source file is corrupted, and I am not likely to start poring through tens of thousands of lines of code even if I could unpack the source. Even if it does unpack, how do we know that exact source was used to build the tool, and not another set of customized source with a built in Trojan or spyware? The reality is that we really don't know unless we both inspect the source code and then compile it and compare the distributed executable.

One final comment on anonymizing, your browsing activities will never be 100% secure and guaranteed to be anonymous. It will be very difficult for anyone to trace you while browsing through the Tor network, except as reported in the Tor wiki, "when you access pages that use Java, Javascript, Macromedia Flash and Shockwave, QuickTime, RealAudio, ActiveX controls, and VBScript are all known to be able to access local information about your operating system and local network. These technologies will work over proxies and can tunnel the information back to their source."

Related Products and Links

You might want to check out these articles too:

Quick Selection Guide

OperaTor    Rating 10 of 10  Gizmo's Top Pick

Pros    secure, fast, portable
Cons    not open source
Developer Home Page   http://archetwist.com/opera/operator
Download link   http://archetwist.com/opera/operator
File Size   7.2 MB   Version 3.3   License Type Unrestricted Freeware   Installation Requirements 95 - Vista
64 Bit version available   64 Bit version available   Portable version available Portable version available

JonDo    Rating 10 of 10

Pros    browser independent
Cons    
Developer Home Page   http://anon.inf.tu-dresden.de/index_en.html
Download link   http://anon.inf.tu-dresden.de/index_en.html
File Size   14.4 MB   Version 00.11.012   License Type Unrestricted Freeware   Installation Requirements 95 - Vista, Macintosh, OS/2, Linux/Unix
64 Bit version available   64 Bit version available   Portable version available Portable version available
Info   Java is required

Vidalia    Rating 9 of 10

Pros    light, fast
Cons    may not be as secure
Developer Home Page   https://www.torproject.org/vidalia/
Download link   https://www.torproject.org/vidalia/
File Size   6.39 MB   Version 0.1.13   License Type Unrestricted Freeware   Installation Requirements 95 - Vista
64 Bit version available   64 Bit version available   Portable version available Portable version available

xB Browser    Rating 9 of 10

Pros    Firefox users will find the interface familiar
Cons    more hassle involving two browsers
Developer Home Page   https://xerobank.com/download/xb-browser/
Download link   https://xerobank.com/download/
File Size   10.2 MB   Version 2.9.4.28   License Type Unrestricted Freeware   Installation Requirements 95 - Vista
64 Bit version available   64 Bit version available   Portable version available Portable version available
Tags

Free anonymous surfing service

Back to the top of the article.

This software category is maintained by volunteer editor rmatrem

5
Average: 5 (3 votes)
Your rating: None

Been using UltraSurf and Tor for sometime... Hardly actually. I dont know why would you even need a anonymous surfing thingy... =/

Im offering free rapidshare accounts here:
http://www.gravityblue.com/2009/06/22/win-free-rapidshare-accounts/

This page contains a lot of great info, but it's presented in a rather confusing and counterintuitive fashion!

I definitely do not agree with this comment. It is one of the most comprehensive review of the anonymous browsing tools available today.
Kudos.
(Silki)
http://webtoolsandtips.com/pc-security/freeware-free-anonymous-web-brows...

Thanks! We plan on changing it slightly, but not too much.

Maybe you could become an editor and contribute to the site too?

Please consider the REMOVAL of ULTRASURF from this review.

!!!!!!!! http://www.wilderssecurity.com/showthread.php?t=237184 !!!!!!!!!!

Thank you for your concern. Although Ultrasurf has been the center of some controversy, there is no evidence that it is or ever has been Malware of any form. However, there have been reports of viruses being attached to the program. This can be done to any program in the hands of someone with unkind intentions. You can avoid getting a virus from a known friendly program by downloading it only from the developer’s website.

I don't know if this is true, but the developer of Xerobank and various other people says Ultrasurf is malware.
http://www.wilderssecurity.com/showthread.php?t=237184

Replies here to make the comment more visible:

I2P!!! Invisible Internet Project FTW!!!!!

www.i2p2.de - Everything you'll ever need! Almost... ;)

For IM and filesharing with friends - OneSwarm!
www.oneswarm.org

I can't agree with your comments regarding Tor. It honestly complicates the function of Firefox so badly that the browser is rendered nearly useless. It also slows down your system terribly.

JL

I agree with u a whole lot,try CYBERGHOST VPN.IT has a basic & premium level(BASIC IS FREE) & it's very fast.How it works----open cyberghost vpn before u open eny browser set up & account----use ur existing email address & a password of ur choice then they will send a conformation code to ur inbox.use it to activate the program------best of all it work with all ur browsers,no need to change proxy it do every thing for you.one eg to know if it rally works use firefox extension (EXTERNAL IP) shows ur current IP in the bottom of firefox,right click on it then click (ALERT ME WHEN MY IP CHANGES).once running cyberghost vpn it will change ur ip then firefox will alert u (check it out u'll thing u're using ur regular network) remember u have to down load it first-------also try hidemyass.com if this is not for u---have fun surfing anonymously and invincible @ the same time.

This is a bit off topic, but I'm interested in your opinions on what the best/most secure free e-mail might be: Which vendor is the most secure, has the shortest retention policy, is most likely to obey the various laws and not roll over at the drop of a hat... Etc. Your thoughts please.

V

this may be a dumb question- but if you use a laptop and access the internet via a wireless signal how would anyone ever know your identity??

same question for using a wireless adapter on a desktop. wouldn't all your activity dead end at the router you were pirating??

MAC ADRESS!

Search on Google for MacShift for Windows or macchanger for Linux.

hello my name is danny i live in chicago i downloaded ultrasurf a while ago and i liked it very much its very fast but than i went to an online scaning web sight called jotti it has 20 scaners and it said that it wan infected with a tragent.434176 can anyone please let me know what that means i have sence uninstalled ultrasurf also when i ran my own scaner it said the same thing can it harm my computer or is it realy nothing realy to worry about. i am looking forward to hearing what you have to say about this thank you very much danny from chicago.

Thanks amarillier, that was really helpful.I came to know about a lot of stuff.

max

doesn't VPN softwares like hotspot shield do the same job?

I had not previously heard of Hotspot Shield, I'll take a look. My first impression, I'm not sure I would want to use it myself. They say it is free, but in the (very long) Hotspot Shield Terms of Use and AnchorFree Privacy notices, having skimmed very quickly, I see mention of creating an account, privacy and confidentiality, and how they use information they collect on the site. Whoa! What's that, information they collect? Isn't this all about privacy and anonymity? I thought it was.

Interestingly, the download is available at http://hotspotshield.com, yet there is almost no other information there than a few links to articles and one link to their terms of use. I had to go to http://anchorfree.com to find a page with a Privacy notice link at the bottom of it, at http://anchorfree.com/privacy.php Read through the privacy notice and see for yourself what information is collected and how they use it.

From the privacy policy under the section titled "the way AnchorFree Uses Information" (my emphasis added):
AnchorFree uses or may use Automatically Collected Information and cookies information to: (a) provide custom, personalized advertisements, content, and information; (b) monitor the effectiveness of our marketing campaigns; (c) monitor aggregate usage metrics such as total number of visitors, and pages viewed; and (d) track your entries, submissions, and status in promotions, sweepstakes, and contests.

From the terms of use, (my emphasis added):
1. Privacy Policy
We believe strongly in providing you notice of how we collect and use data, including personally identifiable information, from the Site. Therefore, we have adopted a Privacy Policy, linked from the bottom of each page of this Site, to which you should refer to fully understand how we collect and use information. You understand that through your use of this Site or the Services, you consent to the collection and use (as set forth in the Privacy Policy) of this information, including the transfer of this information to or from the United States for storage, processing and use by AnchorFree.

Anonymizing software? Maybe so - you make your own choices. Basically, this is an interest of mine, I have nothing to hide, and what I do need to keep secure, I use KeePass password safe to store passwords, TrueCrypt to create encrypted virtual disks to store files I would not want others to find if I lost my notebook computer or flash drive, and https links to browse anywhere that needs security, or OperaTor if I'm feeling paranoid. A bigger concern than browsing should really be what kind of personal firewall do you have? Have you ever installed a firewall and looked at how many times people/computers are probing, trying to break into your computer? The number of hits against my firewall / router which sits between me and my cable modem shocked me in the beginning. Now, I could care less. I have a firewall protecting all my computers at the cable modem, and then I also have a Comodo firewall running on each Windows computer.

For browsing, if you use SSL (https) for your banking, e-bay, amazon etc, you're doing ok. Using an anonymizer to browse to banks and online shopping seems kind of wrong to me. I may be way off base here, but I would take a guess that a large percentage of people who really want anonymizing capabilities are hiding porn surfing activities, and that is an entirely different issue. There is a price to pay for that when using anonymizing services, everything comes down much slower. For banking and anything else financial - do you really want anything to come between you and that financial institution? I don't, and I don't follow links to my bank, amazon, e-bay etc. I type the URL in myself, or use KeePass to open a new tab in Firefox, (I don't ever store passwords in my browser), and then type or use KeePass to feed my name and password automatically for me, under my own control.

i want to know the one that dont request for a proxy before connecting

I'm not sure what this comment means. OperaTor does not ask for a proxy. JonDo allows you to choose from different Tor servers. Vidalia and other packages along with your own browser of choice (Opera, Firefox, Internet Explorer - I'll restrain myself and not comment) will allow you to browse normally or configure them to use the proxy when you want the anonymity.

The added advantage of OperaTor over using your own browser and another separate proxy is that by default OperaTor also cleans up all tracks - cookies, cache, browsing history, searches, everything, unless you deliberately go and turn off that cleanup activity yourself.

Many Yo's:

I'd like to know too... when using Opera Tor is there a encrypted connection between the originating PC and the first proxy server... in other words when I'm using Opera Tor can the junior G-men at my ISP continue to read my mail? If this first, and perhaps most crucial link is in fact encrypted, how does one tell? If it's not... well, the usefulness of the whole application is greatly diminished. I've posted this question to the folks at TOR and can't seem to get an answer. I'm not all that bright, so how 'bout some of you bitheads helping me out here.

Happy Christmas!

See my reply (two below) after some fairly extensive testing using a sniffer on my own PC while browsing with OperaTor with the proxy both on and off. My conclusion, the traffic is encrypted.

Sorry all - I have been somewhat distracted with some major work related issues for a while that have kept me from coming back, updating, and responding to questions. I'm going to try to find evidence to back up what we have been previously led to believe that the session is encrypted, and address other questions. I would not use the presence or absence of the padlock icon to reassure myself about a session being encrypted, because that will appear if the browser is using SSL encryption (generally with https URLs)

I'll try browsing to my own web server using a few of the different anonymizing browser / addon combinations with a sniffer active on my PC and see what I catch. If I hit a simple text page and get back a bunch of gobbledy-gook using OperaTor, and plain text using Opera alone, that will be a good indicator.

We all want to know..

A previous commenter said "I don't see the little golden padlock at the bottom of the page that indicates an encrypted connection. I've checked the Proxy and everything else, all seems to be working properly, it just seems that I'm transmitting in the clear till I get past the first relay. Is that right?"

I am wondering the same thing

the article says this "... all of the anonymizing browser proxy based services[talked about in the article] create a secure encrypted connection between the PC you are using and the first anonymizing proxy server.

But the question remains if Opera Tor is really creating a secure encrypted connection between the PC you are using and the first anonymizing proxy server.... CAN ANYONE CONFIRM OR DISPROVE that this encription is working in Opera Tor?

Thanks.

I have done some fairly extensive testing by sniffing all TCP traffic on my own PC using OperaTor 3.3 (Opera 9.63) with the proxy both on (redirected via Polipo and Tor) and off while browsing to http://whatismyip.com. Traffic *is* encrypted. When I view the captured TCP packets (UDP and ICMP have no real interest in a test like this), traffic while not using the proxy is readable and recognizable when I display the captured packets in ASCII / hex dumps. When I view the equivalent packets from when OperaTor redirected traffic via Polipo and the Tor network, the packets to the exact same web page are completely unreadable with nothing recognizable at all, not even the DNS name or IP address of the whatismyip.com site.

The 'golden padlock' or whatever icon a browser uses indicates an authenticated *https* session, which generally uses SSL. Opera / OperaTor do not put a golden padlock at the bottom of the page (actually, the status bar at the bottom of the browser is the usual place), they put a yellow bar with a black padlock symbol in the URL entry field. The only thing that tells you, is that the particular web server you are connected to is using an SSL encrypted session between you and the server. The secure padlock symbol means nothing in terms of anonymity.

Not seeing a padlock symbol in the browser indicates to me that the traffic between the browser and the Polipo proxy (using OperaTor) is probably not encrypted, but the encryption takes place between Polipo and the Tor network.

Thanks a lot amarillier, for all the work you put into that answer... you're a sweetie!

I am looking for a secure browser system that conceals my IP Address. I have an Imac computer, can you help ?

Thanks, Adam Carter

email: ajc_adam_carter@yahoo.co.uk
telephone: +44 (0)208202 5747

Sorry Adam, I don't know. I have no access to Imacs, but I will see what I can find out. It is possible that one or more of the browsers I have listed has versions available for OS X

The Vermin8tor asks: When installing Opera 9.6, I try to download the voice activation for the browser but it keeps saying there's no internet connection, or something about the server. Is this because I have IE5,Mozilla 2.17 browsers installed? Or is it a product fault?

Voice activation in Opera should not be affected in any way by, or care about any other browsers you have installed. That will be an Opera specific issue. I installed the voice activation extras once, but never bothered with them because I have no real use for that sort of feature. You should be able to find answers to all problems like this on the Opera support forums.

The Vermin8tor says: Oh,use a web proxy browser like ninjaproxy, or tntproxy. As they masks your tracks,prevents drive-by viruses attached to sites,cookies,etc.

The Vidalia tor Privoxy bundle doesn't hide but 'masks' your IP address,via Mozilla. The proof is at http://www.myip.com.On your PC, go to start, run, command prompt,type in ipconfig /all.Enter. Your real IP address should be found here.Compare it to the one detected at myip.com. Use foxtor,trackmenot (mozilla) add ons, ranking booster, safehistory,safecache. The way authorities can track your masked IP address, is to go through all the servers you use to surf the net, and find out your Internet Provider and ask them for your details.

This is not entirely / necessarily true, it depends on your local network setup and whether or not you are using the anonymizing proxy servers. ipconfig shows my IP address as 192.168.0.10. Yes, I don't mind giving you my IP address, nobody can hack me using it, because this is a private, internal, non routable address that is issued to this particular PC I am using by my D-Link wireless router / firewall which has 5 other computers attached and it uses NAT to send and receive packets to the right computer. My real world IP address is issued to by my ISP via my cable modem to my D-Link router. The real test is to browse to a service like http://whatismyip.com or http://www.ipchicken.com/ and see what your IP address is, then turn the proxy on / off in the browser and see the difference. My real world IP comes up as a 72.x.y.z address when I turn the proxy OFF in OperaTor, but as 87.118.101.102 when I turn the proxy ON. The IP reporting site displays what it believes my address to be, which is not my real address. The only system that knows my real IP address is the first proxy that Vidalia / Tor / Privoxy etc. depending what you use connects to. That proxy sends a packet request to the next proxy and so on, until the final destination is reached, who only knows the last proxy's address.

Any authorities trying to track what you are doing would need to be sniffing your network, or your ISP's, and have access to each site along the way. Of course your outgoing packet request indicates the site you are connecting to, but that site has no idea where you are coming from, so if for example you are into some illegal activity and the site you are connecting is being monitored, you could only be traced if every proxy in the chain cooperated with the feds and extracted logs to allow them to trace back to you. If they are watching you already, they will see you go via your internet connection to your ISP, to a proxy, and the URL you are browsing to will already be known.

The Vermin8tor says: Go with firefox 2.18 and vidalia bundle.2.06 alpha. Can be a little difficult to setup, and you can lose your anonymity, but works great overall. If your IP address isn't hidden from http://www.myip.com, then the IP hider is useless.

When using Opera Tor is the link between the originating computer and the first relay encrypted? I don't see the golden padlock at the bottom of the page that indicates an encrypted connection.

TNX

Hi folks:

I have just down loaded and used Opera Tor for the first time, and other than being slow it seemed to work just fine, and with a minimum of bother on my part... that's a good thing. My question is this: It's my understanding that when using Opera Tor the link between my computer and the first relay is encrypted... but I don't see the little golden padlock at the bottom of the page that indicates an encrypted connection. I've checked the Proxy and everything else, all seems to be working properly, it just seems that I'm transmitting in the clear till I get past the first relay. Is that right? By the way I just run into this web site a week or so ago, and absolutely love it (which may be a felony in the state where I live)!

XXX

OperaTor can be somewhat slow, but you will find that any of the other browsing services like XeroBank, JonDo, or any browser using any part of the Tor network of proxies will have slowdowns. This is for a combination of reasons, a few being that you are increasing the distance between you and the web server you are browsing, adding the overhead of every server in between, and dealing with network congestion along the way as other users like you are also using the anonymizing proxies.

Distance may seem like a minor issue, you connect to the internet and the internet gets you there - but start thinking further and you will see how it adds up. If for example you live in New York, connect using OperaTor which first routes you to a proxy in California, which in turn routes you to a proxy in Germany, then to Korea, and finally back to Canada, it will take significantly longer for the light pulses to travel via fiber optic cables along all that distance than if you had just the direct connection, or even one intermediate proxy. Remember that you are limited by the speed of light along the fiber optic cables, and the more intermediate "hops" you introduce, along with the routers and switches and copper LAN cables for the proxy servers, the more delays you introduce. If you only depended on a single packet being sent, you would never notice it, but once you start transferring a page full of text along with a bunch of binary files such as images, you increase the delays.

Any of these truly mask IP#'s? I've heard most do not.

I don't believe that anything can ever truly mask IPs, but if the proxies behave as they are intended to, each proxy in the chain only passes on what the next system needs to know so that the full path back to you is never known by any server other than the first one you connect to. If you pass through just one proxy and it truly does what it is intended to, the web server you connect to will only know that the proxy requested a page. if you pass through two or more proxies, each one only knows about the one immediately before it.

Even if you spoofed MAC and IP addresses, there would still be some amount of trail leading back to you, including such things as your computer name if somebody chose to make use of that. If Javascript is enabled in the browser, the world is potentially open to the web server and any Javascript apps embedded in any pages, another reason I would be very unlikely to use Internet Explorer for any browsing where I really wanted to be as secure and anonymous as possible.

Of course it is somewhat ironic that while I took an interest in anonymous browsing a long time ago when Gizmo was still running the whole Tech Support Alert alone, I really have very little if ever any real need to make use of anonymous browsing, and anyway can't do it from a work environment as work proxy servers filter very effectively to protect company resources, as they should.

Hi

Now that Google Chrome is released, would you place it in this list? I am referring specifically to its incognito mode. Thanks

BK

Sorry for the delay in responding. I have not looked at google chrome yet so I would be guilty of misinformation if I tried telling you anything much about it. My understanding is that incognito mode is no more than clearing (or rather not caching or in any way recording) all history of activity. I don't believe it has any anoymizing proxy capabilities, however I could be wrong. As far as I know chrome simply connects like any other browser, but it may also mask some specific computer information. Details like your IP address, ISP etc will never be completely masked even with services such as Tor, the trail is simply obfuscated by having multiple proxies in the route which don't record or divulge anything to either side of themselves other than the data packets being sent.

I have a question:

I see that these tools allow for privacy, but what effect do they have on malware, adware, etc? Do malwares get caught in the proxy or do they jump into my computer as usual?

These utilities are purely for anonymous browsing. You still need other anti-virus/ad/malware/spam tools to complement these. A good option is to use Firefox with Javablock, Adblock etc together with Vidalia or JonDo, but I would still rely on other utilities to protect against nasties.

Hi

Could you clarify what you mean when you say Vidalia "may not have the same level of anonymizing as JonDo."? Is JonDo more secure?

Thanks

Vidalia simply ties you into the Tor network. It is hard to say for sure which is more secure, or which networks and proxies have the best and securest configurations. JonDo uses some dedicated proxy servers (in the subscription based model) which may give better levels of security simply because the user is paying for a dedicated service. Then too, that is not necessarily true. Since we are using browsers for the proxy serving, we can't easily use tools like traceroute to find how many hops are involved, and which servers are being used to verify the exact paths our traffic takes. JonDo had a little meter showing the anonymity level as Ok, Fair or high which gives us a clue as to how their program is reporting the level of security. That meter may be reporting something meaningful, it may be simply giving us a false sense of security.

Hi

But I'm not sure how that means it provides better privacy, because you said yourself most of the facts are uncertain.

a-squared scan today reports OperaTor3.1 as being infected with this trojan: Spy.Win32.Agent.bqt

With software like anonymous browsing, firewalling and many others, false positives are fairly common, especially based on the potentially unusual behavior these apps use compared to other normal everyday tools. Symantec antivirus corporate, AVG free and others show OperaTor 3.1 and every previous version I have used as being uninfected. I almost always use http://jotti.org now to scan any new downloads like this, and sometimes see two or three warnings out of 15 or 20 virus scanners. I don't believe there is any threat at all in OperaTor, if I did I would not be using it myself and recommending it to others, but thanks for the heads up anyway.

In the list of foreign languages supported by JonDo, "Pycck" means Russian. Just so you know.

Thank you! There is something new to learn every day.